Threat Source newsletter (April 7, 2022) — More money for cybersecurity still doesn't solve the skills gap problem
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-22965 | Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs | 9.8 | 100% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 10f1561457242973e0fed724eec92f8c | 1e870cdeb0e648a6b305a41452c405cca21124de26b54f79d55ad0 MD5: 10f1561457242973e0fed724eec92f8c Typical Filename: ntuser.vbe Claimed Product: N/A Detection |
| md5 | 3e10a74a7613d1cae4b9749d7ec93515 | 40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 MD5: 3e10a74a7613d1cae4b9749d7ec93515 Typical Filename: IMG001.exe Claimed Product: N/A Detection |
| md5 | 3e2dbdfa5e58cb43cca56a3e077d50bf | fdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261 MD5: 3e2dbdfa5e58cb43cca56a3e077d50bf Typical Filename: NirCmd.exe Claimed Product: NirCmd Detect |
| md5 | 93fefc3e88ffb78abb36365fa5cf857c | 81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor |
| md5 | df11b3105df8d7c70e7b501e210e3cc3 | de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 Typical Filename: DOC001.exe Claimed Product: N/A Detection |
| sha256 | 12459a5e9afdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261 | Detection Name: Auto.1A234656F8.211848.in07.Talos SHA 256: 12459a5e9afdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261 MD5: 3e2dbdfa5e58cb43cca56a3e077d50bf Typical Filename: Nir |
| sha256 | 1a234656f81e870cdeb0e648a6b305a41452c405cca21124de26b54f79d55ad0 | t: N/A Detection Name: Win.Dropper.Coinminer::1201 SHA 256: 1a234656f81e870cdeb0e648a6b305a41452c405cca21124de26b54f79d55ad0 MD5: 10f1561457242973e0fed724eec92f8c Typical Filename: ntu |
| sha256 | 5616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 | duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: 5616b94f1a40b49096e2f8f78d646891b45c649473a5b67b8beddac46ad398e1 MD5: 3e10a74a7613d1cae4b9749d7ec93515 Typical Filename: IMG |
| sha256 | 59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa | ion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: 59f1e69b68de4839c65b6e6d39ac7a272e2611ec1ed1bf73a4f455e2ca20eeaa MD5: df11b3105df8d7c70e7b501e210e3cc3 Typical Filename: DOC |
| sha256 | e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 | ware files from Talos telemetry over the past week SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex |
From the original article
5 min read at blog.talosintelligence.com
Welcome to this week’s edition of the Threat Source newsletter. U. S.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.